THE IMPORTANT BITS
Small files. Clear choices.
What your browser remembers, and how you stay in control.
Cookies & device storage · Updated 3 October 2026Essential cookies
Incentively Limited, registered in England and Wales, company number 17121895. Registered office: 3rd Floor, 86–90 Paul Street, London, England, United Kingdom, EC2A 4NE. We use first-party cookies to provide the game and secure sign-in.
| Cookie | Why it is used | Duration |
|---|---|---|
__Host-pq_session | Links your browser to its game session and saved progress. | 30 days, renewed on return. |
__Host-pq_flow | Checks that a sign-in response belongs to the sign-in you started. | 10 minutes; cleared after callback. |
__Host-pq_identity | Encrypted binding to your verified Place Keys sign-in. | Up to 14 days; cleared on sign-out. |
These cookies are marked Secure, HttpOnly and SameSite=Lax. The app does not offer an “accept all” banner for these essential functions. Disabling them may stop saved play or sign-in from working.
Private campaign access
When you enter a private hub, __Host-pq_bhx stores an encrypted access grant, not the password. It lasts for the access period chosen by the hub administrator: one hour, 24 hours or seven days. Lock lounge clears this grant. __Host-pq_bhx_nonce protects hub requests against forgery for 24 hours. Both cookies are Secure, HttpOnly and SameSite=Lax. The administrator stores only a password hash.
Private campaign scores use browser storage with separate airline, guest and account copies. Account results waiting to sync stay on this device until a successful sync; clearing browser data before then removes those pending changes. Guest results stay on the device and are not automatically moved into an account.
Other device storage
Red Carpet Rush and Arrivals Rush use local storage to remember your stage name, character, completed career venues, personal bests and unfinished-run checkpoints. Separate copies keep guest and signed-in account play apart; friend-challenge checkpoints are separate from career runs and include the challenge link data needed to resume. Pending account changes are kept for syncing when online. This storage supports the saved-game features you use; it is not an advertising identifier. There is no fixed expiry: entries remain until replaced, removed by the game or cleared by you or your browser. Guest career progress can be merged into the account you sign into. Clearing site data removes local checkpoints and unsynced changes. Completed account saves can be restored when you sign in online; unfinished runs cannot be restored from another device.
A small device-only preference remembers Home Screen and notification prompt choices, including “Not now” and “Don’t ask again”. The prompt preference itself contains no account identifier. Prompts are limited to one per visit, with a three-day cooldown after an appearance or dismissal and at most three appearances of each type. Optional prompt events follow your usage-measurement choices. Clearing browser storage resets these choices.
Session storage keeps the letters you are typing in Qwerty in that browser tab. It is cleared on game completion or sign-out, and normally when the tab session ends. Cached app styles, logos and artwork help the installed app load and provide an offline notice. Private profiles, answer keys and sign-in responses are not cached by the app’s service worker.
If you enable push, your browser stores a subscription and device permission. You can remove it in My profile → Manage this device, or your browser’s notification settings.
Optional account-prompt storage
When both measurement choices are on, an encrypted HttpOnly cookie named __Host-pq_registration keeps an opaque prompt reference through sign-in for up to 24 hours. It is cleared after successful sign-in, sign-out, profile deletion or measurement opt-out. Optional session storage pq-registration-entry-v1 remembers the entry page and referring hostname for the same period or until the tab closes. This is first-party attribution, not advertising tracking.
Optional measurement
The app has no advertising cookies. Separately, Google Analytics is on by default, with a browser-specific Turn off analytics option in Analytics choices. Existing opt-outs remain off. It uses cookies to measure visits and quiz starts and completions, labelled by Pop Quest or Place Keys. Google receives device and usage information; we do not send names, emails, account IDs or answers. You can change this browser-specific choice through Analytics choices on game, home and results screens. See https://policies.google.com/privacy. Optional first-party usage measurement is controlled in My profile and is off by default. It uses your existing game session and records only the described usage events on our server; agreeing to it is not necessary to play.
Place Keys has its own storage when you visit it to sign in. See its notices at that point. Browser and hosting security services may also have their own technical records.
Changing your choices
You can clear cookies, session storage and cached site data in your browser. Clearing a guest session can make guest scores inaccessible from that browser. Sign in first if you want to keep progress connected to an account. For data held on our servers, use the export/deletion tools or contact Incentively about Pop Quest or email hello@incentively.co.uk. Read the privacy notice for retention and your rights.